Comment 10 for bug 1284718

I agree with Mark this is not a security issue. Even if a user attaches a port to an external network it won't have connectivity as we only use external networks to keep track of ip addresses for NAT rules. It looks like in his trace he is hitting this bug which was fixed and backported to havana already: https://review.openstack.org/#/c/54521/ .

I believe gary had a patch that validated the input on attach_interface but I'm not able to find it at the moment on gerrit X.x